5.3
Medium
CVE-2024-3733 The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress…
Description
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.9.15 via the ajax_load_more() , eael_woo_pagination_product_ajax(), and ajax_eael_product_gallery() functions. This makes it possible for unauthenticated attackers to extract posts that may be in private or draft status.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| essential_addons_for_elementor 5.9 | earliest → 5.9.15 | No fix stated |
| Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders 5.9 | earliest → 5.9.15 | No fix stated |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets 5.9 | earliest → 5.9.15 | No fix stated |
Other CVEs of essential_addons_for_elementor
The 4 CVEs of essential_addons_for_elementor →
CVE-2024-8979
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for…
8.0
High
CVE-2021-4447
The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to and…
8.8
High
CVE-2024-3018
The Essential Addons for Elementor plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…
8.8
High